Lucene search
K

255 matches found

GithubExploit
GithubExploit
added 2026/05/26 5:52 a.m.47 views

Exploit for CVE-2026-6271

CVE-2026-6271 — Career Section WordPress Plugin RCE Scanner...

9.8CVSS5.8AI score0.00183EPSS
Exploits1
Patchstack
Patchstack
added 2026/05/14 9:48 a.m.6 views

WordPress Career Section plugin <= 1.7 - Unauthenticated Arbitrary File Upload vulnerability

Unauthenticated Arbitrary File Upload vulnerability discovered by Paolo Tresso - Wordfence in WordPress Plugin Career Section versions = 1.7...

9.8CVSS5.8AI score0.00183EPSS
Exploits1References1Affected Software1
NVD
NVD
added 2026/05/14 7:16 a.m.7 views

CVE-2026-6271

The Career Section plugin for WordPress is vulnerable to Arbitrary File Upload in all versions up to, and including, 1.7 via the CV upload handler. This is due to missing file type validation. This makes it possible for unauthenticated attackers to upload files that may be executable, which makes...

9.8CVSS0.00183EPSS
Exploits1References4
EUVD
EUVD
added 2026/05/14 6:44 a.m.3 views

EUVD-2026-30253

The Career Section plugin for WordPress is vulnerable to Arbitrary File Upload in all versions up to, and including, 1.7 via the CV upload handler. This is due to missing file type validation. This makes it possible for unauthenticated attackers to upload files that may be executable, which makes...

9.8CVSS6.4AI score0.00183EPSS
Exploits1References4
CVE
CVE
added 2026/05/14 6:44 a.m.8 views

CVE-2026-6271

The CVE-2026-6271 entry concerns the WordPress Career Section plugin (all versions up to 1.7) vulnerable to Arbitrary File Upload via the CV upload handler due to missing file type validation. Unauthenticated attackers can upload executable files, enabling remote code execution as described in th...

9.8CVSS6.4AI score0.00183EPSS
Exploits1References4
ATTACKERKB
ATTACKERKB
added 2026/05/14 6:44 a.m.4 views

CVE-2026-6271

The Career Section plugin for WordPress is vulnerable to Arbitrary File Upload in all versions up to, and including, 1.7 via the CV upload handler. This is due to missing file type validation. This makes it possible for unauthenticated attackers to upload files that may be executable, which makes...

9.8CVSS6.4AI score0.00183EPSS
Exploits1References5
Cvelist
Cvelist
added 2026/05/14 6:44 a.m.31 views

CVE-2026-6271 Career Section <= 1.7 - Unauthenticated Arbitrary File Upload

The Career Section plugin for WordPress is vulnerable to Arbitrary File Upload in all versions up to, and including, 1.7 via the CV upload handler. This is due to missing file type validation. This makes it possible for unauthenticated attackers to upload files that may be executable, which makes...

9.8CVSS0.00183EPSS
Exploits1References4
Vulnrichment
Vulnrichment
added 2026/05/14 6:44 a.m.5 views

CVE-2026-6271 Career Section <= 1.7 - Unauthenticated Arbitrary File Upload

The Career Section plugin for WordPress is vulnerable to Arbitrary File Upload in all versions up to, and including, 1.7 via the CV upload handler. This is due to missing file type validation. This makes it possible for unauthenticated attackers to upload files that may be executable, which makes...

9.8CVSS6.4AI score0.00183EPSS
Exploits1References4
Positive Technologies
Positive Technologies
added 2026/05/14 12:0 a.m.5 views

PT-2026-40890

The Career Section plugin for WordPress is vulnerable to Arbitrary File Upload in all versions up to, and including, 1.7 via the CV upload handler. This is due to missing file type validation. This makes it possible for unauthenticated attackers to upload files that may be executable, which makes...

9.8CVSS6.4AI score0.00183EPSS
Exploits1References5
CNNVD
CNNVD
added 2026/05/14 12:0 a.m.5 views

WordPress plugin Career Section 代码问题漏洞

WordPress and WordPress plugins are both products of the WordPress Foundation. WordPress is a blog platform developed using the PHP language. This platform allows for the creation of personal blog websites on servers based on PHP and MySQL. A WordPress plugin is an application extension. Versions...

9.8CVSS6.2AI score0.00183EPSS
Exploits1References1
EUVD
EUVD
added 2026/04/16 9:31 a.m.0 views

EUVD-2025-209493

The Career Section plugin for WordPress is vulnerable to Cross-Site Request Forgery leading to Path Traversal and Arbitrary File Deletion in all versions up to, and including, 1.6. This is due to missing nonce validation and insufficient file path validation on the delete action in the...

8.8CVSS5.7AI score0.00029EPSS
Exploits0References3
Patchstack
Patchstack
added 2026/04/16 9:15 a.m.2 views

WordPress Career Section plugin <= 1.6 - Cross-Site Request Forgery to Arbitrary File Deletion vulnerability

Cross-Site Request Forgery to Arbitrary File Deletion vulnerability discovered by Ivan Cese in WordPress Plugin Career Section versions = 1.6...

8.8CVSS5.8AI score0.00029EPSS
Exploits0References1Affected Software1
NVD
NVD
added 2026/04/16 8:16 a.m.1 views

CVE-2025-14868

The Career Section plugin for WordPress is vulnerable to Cross-Site Request Forgery leading to Path Traversal and Arbitrary File Deletion in all versions up to, and including, 1.6. This is due to missing nonce validation and insufficient file path validation on the delete action in the...

8.8CVSS0.00029EPSS
Exploits0References2
Vulnrichment
Vulnrichment
added 2026/04/16 7:39 a.m.2 views

CVE-2025-14868 Career Section <= 1.6 - Cross-Site Request Forgery to Arbitrary File Deletion

The Career Section plugin for WordPress is vulnerable to Cross-Site Request Forgery leading to Path Traversal and Arbitrary File Deletion in all versions up to, and including, 1.6. This is due to missing nonce validation and insufficient file path validation on the delete action in the...

8.8CVSS5.7AI score0.00029EPSS
Exploits0References2
ATTACKERKB
ATTACKERKB
added 2026/04/16 7:39 a.m.1 views

CVE-2025-14868

The Career Section plugin for WordPress is vulnerable to Cross-Site Request Forgery leading to Path Traversal and Arbitrary File Deletion in all versions up to, and including, 1.6. This is due to missing nonce validation and insufficient file path validation on the delete action in the...

8.8CVSS5.7AI score0.00029EPSS
Exploits0References3
CVE
CVE
added 2026/04/16 7:39 a.m.5 views

CVE-2025-14868

The CVE affects the WordPress Career Section plugin (versions up to 1.6). The root cause is missing nonce validation and insufficient file path validation on the delete action in appform_options_page_html, enabling CSRF that can lead to Path Traversal and Arbitrary File Deletion. The vulnerabilit...

8.8CVSS5.7AI score0.00029EPSS
Exploits0References2
CNNVD
CNNVD
added 2026/04/16 12:0 a.m.5 views

WordPress plugin Career Section 安全漏洞

WordPress and WordPress plugins are both products of the WordPress Foundation. WordPress is a blog platform developed using the PHP language. This platform allows for the creation of personal blog websites on servers based on PHP and MySQL. A WordPress plugin is an application extension. WordPres...

8.8CVSS5.8AI score0.00029EPSS
Exploits0References1
Positive Technologies
Positive Technologies
added 2026/04/16 12:0 a.m.1 views

PT-2026-33281

The Career Section plugin for WordPress is vulnerable to Cross-Site Request Forgery leading to Path Traversal and Arbitrary File Deletion in all versions up to, and including, 1.6. This is due to missing nonce validation and insufficient file path validation on the delete action in the 'appform...

8.8CVSS5.7AI score0.00029EPSS
Exploits0References3
Spring Engineering
Spring Engineering
added 2026/04/09 12:0 a.m.3 views

Spring Office Hours Podcast: S5E12 - Developer Soft Skills with Arun Gupta

Join Dan Vega and DaShaun Carter for another essential update from the Spring ecosystem. In this episode, the guys are joined by DevRel and Java legend Arun Gupta to discuss a topic often overlooked but vital for career longevity: soft skills for developers. Drawing from his decades of experience...

5.8AI score
Exploits0
Microsoft Secure
Microsoft Secure
added 2026/03/05 5:0 p.m.3 views

Women’s History Month: Encouraging women in cybersecurity at every career stage

Women’s History Month—and International Women’s Day on March 8, 2026—always gives me pause for reflection. It’s a moment to think about how far we’ve come and think about who we choose to uplift as we look ahead. Throughout my career, I’ve been inspired by extraordinary women leaders—trailblazers...

6AI score
Exploits0
Rows per page
Query Builder